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AMENDMENTS TO THE CLAIMS 

Please amend claims 1, 22, 25, and 26, as set out in the following complete listing of the claims 
of the application. 

1 . (Currently amended) A method of associating data with users , and involving associations 
between user identifying information and data, the method comprising: 

concealing a user identity using concealing data in the user identifying 

information, 

wherein the concealing data remains fixed for reissued associations, 

such that it is possible to check for a given user identity whether the association 

applies to it. 

2. (Original) The method according to claim 1, wherein the user identity is concealed using a 
hash function. 

3. (Original) The method according to claim 1, wherein the user identity is concealed using 
encryption. 

4. (Original) The method according to claim 1, wherein the concealing data comprises a random 
value. 

5. (Original) The method according to claim 1, wherein the associations are publicly available. 

6. (Original) The method according to claim 1, further comprising the step of providing an 
association. 

7. (Original) The method according to claim 1, further comprising 

the step of receiving a request for an association, and 
the step of providing the association. 
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8. (Original) The method according to claim 6, further comprising the step of signing the 
provided generated association. 

9. (Previously presented) The method according to claim 7, wherein the request includes the user 
identifying information in which the user identity is concealed using concealing data. 

10. (Original) Method according to claim 1, wherein the concealing data is encrypted by a secret 
user key. 

11. (Cancelled) 

12. (Original) Method according to claim 1, wherein the association is a digital certificate. 

13. (Original) Method according to claim 12, wherein the digital certificate is an SPKI 
authorization certificate. 

14. (Original) Method according to claim 12, wherein the association includes the right to access 
purchased digital content. 

15. (Original) Method according to claim 1, wherein the association comprises a content 
identifier. 

16. (Original) Method according to claim 1, wherein the association comprises a rights attributes 
data field. 

17. (Original) Method according to claim 1, wherein the association includes an index indicating 
the right user identifying information associated with the user. 

1 8. (Previously presented) Method according to claim 1, further comprising the step of sending a 
request in relation to said data including the concealed user identifying information. 
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19. (Original) Method according to claim 1 8, wherein the request includes the concealing data in 
order to enable revealing of the user identifying information. 

20. (Original) Method according to claim 1 8, wherein the request further includes a secret 
security identifier. 

21. (Original) Method according to claim 18, further including the step of encrypting the 
concealing data by using a secret domain key, such that the concealing data is encrypted in at 
least the request. 

22. (Currently amended) Method of giving a user access to information in relation to an 
association between a user and data , the method including the steps of: 

receiving from a user a request concerning said data using user identifying 
information related to the user, 

retrieving the association including user identifying information that has been 
concealed using concealing data, wherein the concealing data remains fixed for reissued 
associations, 

checking the concealed user identifying information in the association, and 
providing the user with information related to the data based on a correspondence 

between the concealed user identifying information in the association and user identifying 

information at l e ast linked to at least the user. 

23. (Previously presented) Method according to claim 22, wherein the step of providing the user 
with information comprises providing the user access to content corresponding to said data. 

24. (Previously presented) Method according to claim 22, further including the step of 
performing authentication of the user. 

25. (Currently amended) Method according to claim 22, wherein the user identifying information 
received from the user is the same as the user identifying information in the association, and 
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wherein the step of providing is based on a correspondence between the concealed user 
identifying information and the user identifying information received from the user. 

26. (Currently amended) Method according to claim 22, wherein the user identifying information 
received from the user is different than the user identifying information in the association 
[[and]] the method further including the step of: 

comparing the user identifying information of the user against a user domain 
certificate including user identifying information related to all users in a domain, 

wherein the step of checking concealed user identifying information in the 
association with user identifying information is performed on user identifying information in the 
domain certificate, and 

the step of providing is performed based on a correspondence between the 
concealed user identifying information in the association and any user identifying information in 
the domain certificate. 

27. (Original) Method according to claim 26, wherein the domain certificate includes concealed 
user identifying information of all the users in the domain and an encryption of a concatenation 
of all user identifying information in the domain using a secret domain key. 

28. (Previously presented) Method according to claim 27, further including the steps of sending 
the encrypted concatenation of all user identifying information to the user and receiving 
identifying information about all users in the domain from said user. 

29. (Previously presented) A computer readable storage medium including a set of instructions 
executable by a processor, the set of instructions being operable to: 

conceal user identifying information in an association between a user and data 
using concealing data for provision of the concealed user identifying information in the 
association, wherein the concealing data remains fixed for reissued associations. 

30. (Previously presented) A computer readable storage medium including a set of instructions 
executable by a processor, the set of instructions being operable to: 
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receive a request from a user to access information in relation to an association 
between the user and data, said data including user identifying information relating to the user, 

retrieve the association between the data and the user including user identifying 
information, which has been concealed using concealing data, wherein the concealing data 
remains fixed for reissued associations, 

check the concealed user identifying information in the association, and 

provide the user with information related to the data based on a correspondence 
between the concealed user identifying information in the association and user identifying 
information at least linked to the user. 

31. (Previously presented) A computer readable storage medium including a set of instructions 
executable by a processor, the set of instructions being operable to: 

receive user identifying information related to a user, the user identifying 
information being related to an association between the user and data, wherein the user 
identifying information is concealed using concealing data, and 

send a request concerning data including the concealed user identifying 
information, wherein the concealing data remains fixed for reissued associations, 

so that the association between the user and said data comprising the concealed 
user identifying information can be received. 

32. (Previously presented) A computer readable storage medium including a set of instructions 
executable by a processor, the set of instructions being operable to: 

receive a request concerning data including user identifying information which 
has been concealed using concealing data, the data being included in an association between the 
user and the data, wherein the concealing data remains fixed for reissued associations, and 

provide the association between the user and said data comprising the concealed 
user identifying information. 

33-36. (Cancelled) 
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